From d169d0ff674c2bc015f3ef931a1e9a7f21e73f2d Mon Sep 17 00:00:00 2001 From: Ralf Anton Beier Date: Sun, 3 May 2026 16:00:17 +0200 Subject: [PATCH] config: require Format / Clippy / Test as org-wide branch-protection floor MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Currently temper applies branch protection to every pulseengine repo but the required_status_checks.contexts list is empty, so any PR can merge regardless of CI outcome. Add a minimal universal floor of checks that every Rust repo in the org has in its CI workflow. The list is deliberately minimal: - Format (rustfmt --check, every repo) - Clippy (cargo clippy, every repo) - Test (cargo test/nextest, every repo) Per-repo branch protection can extend this list with additional checks (spar already requires Cargo Deny, Mutation Testing, Security Audit, etc. via direct API config — those settings stack with this temper-managed floor without conflict). Bumping this list to require something not every repo ships will leave those repos stuck in unmergeable state, so keep it minimal and additive when adding new entries. --- config.yml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/config.yml b/config.yml index b13fdac..354d48e 100644 --- a/config.yml +++ b/config.yml @@ -30,7 +30,17 @@ branch_protection: default: required_status_checks: strict: true - contexts: [] + # Universal floor: every pulseengine Rust repo has these three + # jobs in its CI workflow. Per-repo can extend (e.g. spar adds + # Test, Cargo Deny, Mutation Testing, etc. via repo-level + # branch protection — those settings stack with this floor). + # Bumping this list to require something that not every repo + # ships will leave those repos unable to merge, so keep it + # minimal and additive. + contexts: + - Format + - Clippy + - Test enforce_admins: true required_pull_request_reviews: required_approving_review_count: 0